CVE-2018-11544

Name of the Vulnerable Software and Affected Versions The Olive Tree Ftp Server application version 1.32

Description The issue concerns insecure data storage. Specifically, a username and password are stored in the /data/data/com.theolivetree.ftpserver/shared prefs/com.theolivetree.ftpserver preferences.xml file as the prefUsername and prefUserpass strings.

Recommendations For The Olive Tree Ftp Server application version 1.32, consider removing or securely storing the prefUsername and prefUserpass strings from the shared preferences file to mitigate the risk of insecure data storage. As a temporary workaround, restrict access to the shared preferences file to minimize the risk of exploitation.